Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
82acbccaea52b0c51a4990b06304078e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
82acbccaea52b0c51a4990b06304078e_JaffaCakes118.exe
Resource
win10v2004-20240730-en
Target
82acbccaea52b0c51a4990b06304078e_JaffaCakes118
Size
6.4MB
MD5
82acbccaea52b0c51a4990b06304078e
SHA1
755fac39c6c8c38281adeeb3bc58400bac114fe6
SHA256
c0f41244c96b7dafd65a3f7119a23972b814c411c70a0a91d9506b2390b085d3
SHA512
f3b0f085456470c9a98ae4bea01585132b402ad15cfdc902f2ddb02b751cc5af0cc86f8cc3cdcf517e0b1d7c4e0fd8a2804bcff1e524217e155fdf9d796746d3
SSDEEP
98304:6TqR6mPG6PLz86POVMqln54AlHp+qV6pm088F2SEy7fuoGy:PR6Q3f86PwDX+pm0tQTy
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
RaiseException
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
OleInitialize
SafeArrayCreate
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
Y6�<�ʣ���$�.c���¥oUHr�s�Y_�S�+j/�j/�G-E�3�Y��K��ށ�g9ė9L���u.�V���ʯQ�'���Nq!��X�%�d�q�W3xUW~f��9��,�i+��>5P����1��o*?������F�Ck�^}$�%�:m�XQ�$��ь��d�{���A�t!�r�2�����#���`���}ɜOp�Jaو���g�����D$E��|bQѷQ�r/�J���x��P���4a��}��lס�E�� ,�Ä+���>��E`_���|�N{�����Cl� �{H tk�����6M��W*�L�%��X�o��9���[�%j�������(�N��mQ��ԃ��:B��E�=+� ��.n�.i����FD)�Yx�go7jj*D����������)��4��¶��a��5���S���|(�� 4��2l.n�Ϻq����'� xszi�#SA|����=rd-� <.���͠�A��Q$0�r��I�"��`�i%�J�Oro��d�Z��e©������f�.���|vM������dm a�B���hq�9��&*}�8-���M$R(Q��-�RȆļ����P~���A߳op �T琟�L~<�������A�Б��chׯT��$6��М����c%P���r9���@��㫳q����!#<gE�O�,��J����"��k���ܕk�<�̦�g��%��6�Em���=�j^�)meE/%M�Z���<�(,cᇽ��b�R�y��{��M(]!��h�lO�'���W[e�kP��s�K}���hͦ|dnv�볍�������NJ��c�c2+s��s?ў�4���õ"���q��>����)��+ʫ��>�����/$��g�Gg��5z�H��[���"����g#Xǭ��W��죍�X>��p�s��IG��I�ߐD�n����6a�+���M�K��)��W�s�Z ���z�m��j6��G�+%�Y"�Z�=$�ӱ�Vt�_s;.E�C����*1�2 ��S ��E �~V1��f��8��Q�'��/��rD.W�|j�J�lK$��%���f��(��Ic�PZ�Z����4 �@,dQ��T��D�7��.m��k���׳ɹz��Lg���a":�Ty x&�-at\hK������"�$Uu�9>0���`�1ꏼ{���8���,4-�1|&���j�a�I���Ϩ.�c�ç��j!���l��m�D"m)�IM�'hje6�މ��X�]o��J7BE1&��N�E*�;�P�)��T�jv����.Ќ"�_���ڡב��=�`��l�pTzv���o2g�EG*6h"���/������"�!�C��!6eO�CtD1�f���B,5�O!Ĺ�����8/ϝ���*�}�c��:�sŚ��r�;-�����h����F���m6S��Y����k�M� ?+�s�D�N5����вo?j�|��E�b�06ȷ 9��Z��x38u 4U�|����iTp��&k|� wFQ����Y�Ј}z�)f�p�3���@���O���,�_Փ�iգ��ۉK�`a�/%$"u�A傗��4����#�D�&p��se(��!��ryȤ��`PU����t�Y7���Ǯ11oъQ*�Uit���GC��="�Y�aӱ���\��0c�oH, _��--�Q�e��^�Л��ٰ�XV��J��.4yiK��Ջ1�&�o�y"uR�M�9ʍ(�:?e�W�\�9N���"�IU�&�w�<���g��%+Fԡ��s<b�A!/��������2]/���Rc �\�Ɏ�VZ�OMY���@3���5��b�aT�6V8�r�g0�Z��ۘL��Ȝo%c�xxl�ɑ�fE0h�oF��l] �l�!����;� ڂ��?���ޘ>��'TBe�W�ƤQ�}*H�P ܷq��g,M����^"\����|,���0G6�(�xq�����[)����0���+�*壔V;�a���H�y���(��G�o ��+�/���Ћ����Z��>����&��?�|āOK�-1mz���"}��C���\�Ql����2s�()НZ�fZ?z��~���`jP���g�˾p��R >w\X��y�� ���E�ZKy���N:4C��E�������7��K�Ο!c���κ.�����+��[Xk���ý�S���8&��S�xWR�is��\��@���j~�B|�����v���z���n&>�ֹ��8�<i�7h���h�|����g�],�� e��Ha?h�����w!�S�/����E{��������f�Q;|A��ʧⲓJ�����r��`˞K`�"�,�S��ݯ�鞿���~�v F�w���789A���Ey.U����B���������_�MU��g��I�C(l���@���\a;_JHI8,�4ɫ������](~�W�MDV\���"F�?�=$��.�V)��c�tI���< ��̐�";���F��]�jn�Bn�26� �ǝ[�h�_��E���*-��4�O���O&��ѤFK-��u�Π98?�T��L���r���హj ����Nd�XWq)�.���j� (��e&�b��8���9��s�&���$[Bt�4��(ؘ��y��F�,�$�$�3-,G��x� ���緝�R�1> W�VtHgzZ|rϵ��z�Х�J� p\���=�,g�(!S�v��͖�"���(��%��0��X�fy�p�,��`�����?�bs���zԆ,@�A���;�A&���[��j���Ϡ�>X�g<_@��+�C�S�=2�(mVu���{]%��%�Y�k���Ν���h����"݀Ac��GA�ޑj��<!����|�8$�����_��_���T��=�iK����`�`��7��6��W��)9�LR̋ E��GS���(TL�ѨN�XD�����eߵ�A����\)4�"T��Ҕ7%����vt[�b��~®���i}M��C�̌��E�[b%�$��)q����8V�d�ίSR<���?�?���� ��*@
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ